CVEvulnerability
CVE-2002-1062
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-10-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.
Affected configurations
• t. hauck jana web server 1.0
• t. hauck jana web server 1.45
• t. hauck jana web server 1.46
• t. hauck jana web server 2.0
• t. hauck jana web server 2.0 beta1
• t. hauck jana web server 2.0 beta2
• t. hauck jana web server 2.2.1
References
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html archives.neohapsis.com
- http://www.iss.net/security_center/static/9684.php Vendor Advisory
- http://www.securityfocus.com/bid/5321 Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html archives.neohapsis.com
- http://www.iss.net/security_center/static/9684.php Vendor Advisory
- http://www.securityfocus.com/bid/5321 Patch, Vendor Advisory